Exposed extortion-site logs offer possible clues to GMO attackers

Japanese cybersecurity specialists say visits immediately after site edits could help trace those responsible for the breach.

Channel: TBS NEWS DIG Powered by JNN ·

JapanStory of October 31, 2026Trari Newsroom

Why this story? One of TBS NEWS DIG Powered by JNN's most watched videos since yesterday, with 405,635 views.

TBS NEWS DIG Powered by JNN: The news channel of JNN, a Japanese news network led by TBS. 3.4M subscribers and 5.7B views.

GMO不正アクセス「攻撃側に重大なミスか」脅迫サイトに特徴的な動きホワイトハッカーが分析｜TBS NEWS DIG

GMO has offered a ¥150 million reward for information about its attackers, while cybersecurity specialists examine an apparent mistake: an extortion website that exposed its own visitor records.

Japan's TBS NEWS DIG Powered by JNN reports that the Japanese internet group has received hundreds of tips through its information-submission website. GMO says some of the information could help identify those responsible for the unauthorized access.

The report's central clue is the timing of visits to the extortion site. Kirishiki, a cybersecurity specialist at Unknown Technologies, says several IP addresses showed a distinctive pattern: someone edited the website, published the changes and then visited immediately afterward. Those visits could represent an operator checking their own work.

According to Kirishiki's analysis, the operators generally used virtual servers to conceal their access. But one visit appeared to come through an internet connection associated with many devices, potentially suggesting an apartment building. He says the trail might narrow the location to a particular building, rather than establish which person was using the connection.

Takayuki Sugiura, representative director of the Japan Hacker Association, describes a separate analysis of records left by the attackers. He says he supplied GMO with information that included a possible suspect's name, address and contact details. The report does not announce an arrest or a confirmed identification.

Sugiura argues that even a single lapse can give law enforcement a traceable lead, and says he believes the prospects of catching those responsible are high.

Published on Trari